
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: EknMX2BJrRhbwIHY9RMmI62Zu+KulzZlv8CxF1OleWo=
Subject key identifier: 84:32:16:38:1D:2E:45:8B:7F:3F:19:45:30:C5:C7:B7:8E:97:77:1A
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 01A0C1B1EB7B9E65F45927EEC9AD939FACE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0655
Signing time: Mon 21 Sep 2026 02:00:57 +0000
Manifest this update: Mon 21 Sep 2026 02:00:57 +0000
Manifest next update: Tue 22 Sep 2026 02:00:57 +0000
Files and hashes: 1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: aslGtasP2eNpUzMpcEbvgtoeI2FCP1b5M7VICY+cn40=)
3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:eb:7b:9e:65:f4:59:27:ee:c9:ad:93:9f:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Sep 21 02:00:57 2026 GMT
Not After : Sep 22 02:00:57 2026 GMT
Subject: CN=843216381d2e458b7f3f194530c5c7b78e97771a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:99:82:bf:51:4f:34:b3:c1:2b:13:c1:58:
b5:e7:99:42:f9:3d:f7:b7:a4:a6:57:dd:58:f4:36:
c5:0d:6f:3a:d3:af:66:66:d4:5a:2f:bf:d8:89:c4:
41:ef:fa:d8:c2:bf:ba:7f:d2:00:f0:e6:0f:e6:87:
1a:ae:2c:99:5e:67:53:96:b5:11:d9:5e:10:1e:5c:
66:bb:f3:f0:7f:e6:99:49:d2:af:12:3d:79:65:2a:
71:97:c1:f8:0a:3c:b8:07:fc:a0:56:5d:c4:07:cd:
e3:cc:25:ad:1e:f5:dc:46:bb:46:cf:ea:41:5e:06:
1b:a1:37:66:21:19:fa:54:96:6e:e8:0d:bc:eb:2d:
c2:7b:0f:60:e6:15:b2:49:ff:76:26:76:d2:cb:86:
90:7a:79:b4:d6:b2:85:8a:1d:b0:10:fd:00:34:92:
76:65:3b:fb:f6:01:3a:44:8f:bc:58:67:ee:1f:57:
ad:00:af:88:ad:66:36:22:11:96:10:1c:7b:57:81:
bf:74:b5:6d:84:5a:93:94:a3:f8:76:f2:af:54:03:
ca:b0:37:ee:2a:61:13:46:96:2f:8b:59:7c:17:ef:
2e:4c:90:11:c3:37:90:b3:0a:34:3c:53:b7:0d:71:
d8:c7:27:58:07:4f:cb:3c:fe:20:82:75:d2:ab:47:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:16:38:1D:2E:45:8B:7F:3F:19:45:30:C5:C7:B7:8E:97:77:1A
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:36:c7:b7:f4:d5:0d:a1:18:70:e4:e1:a4:b6:0f:aa:c6:7e:
d2:42:e9:a0:58:d4:93:1e:26:a7:ab:ce:fa:e8:14:7a:78:97:
1a:30:34:8d:ce:5d:2b:89:75:f4:7f:ea:10:81:a8:a4:4d:1d:
b2:9e:d4:e6:c7:7a:64:02:ce:f6:c2:c6:20:0d:b1:38:75:f8:
40:d2:14:5a:e1:53:27:30:b3:df:ad:29:a7:3d:41:34:ff:1b:
87:5b:ac:f4:7f:eb:37:4e:5a:df:6a:be:09:47:55:27:22:97:
4c:a6:f4:e6:3d:60:59:85:e8:fb:e4:c3:d0:35:48:f0:bc:99:
0b:fe:99:d7:a9:2e:67:19:dd:cd:22:92:d9:e3:6a:cb:e5:97:
31:60:1e:cb:1c:65:80:b4:c7:79:e4:22:f3:91:b4:5e:f3:7d:
cb:fc:de:3e:67:fa:1e:52:88:aa:08:3d:c5:bb:2a:18:9f:9b:
23:fd:3b:28:1f:ff:f6:83:d8:19:f9:b2:fa:38:07:5b:0f:f8:
61:3f:54:e1:fc:ce:0f:0b:07:43:40:bb:11:6a:27:4e:16:bc:
98:19:4b:81:61:c5:34:09:3a:60:cd:9a:b7:91:ab:ff:f7:cb:
78:0a:b8:ca:0e:2f:05:db:f9:0f:02:da:3a:a3:0b:9b:1d:86:
5b:e4:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:38:24 2026 by rpki-client